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(54) Keyless motor vehide entry and ignition system 



(57) A keyless control system is disclosed which 
may be errployed to gain entry to a motor vehicle and 
start an engine. When using this system, a user acti- 
vates a remote control by selecting a function tor the 
motor vehicle to perform. In response, a challenge 
number is exchanged and used in an encryption algo- 
rithm by both the remote control and a control circuit in 
the motor vehicle to produce independently of each 
other separate algorithm answers. A first verification 
indication is produced when the control circuit finds both 



answers to be the same. The remote control also sends 
its unique remote control identification and a designa- 
tion of the selected function to the control circuit. If the 
received remote control identification matches is on an 
authorized remote control list stored in the control cir- 
cuit, a second verification indication is produced. When 
both the first and second verification indications are pro- 
duced, the control circuit issues a signal that causes the 
motor vehicle to perform the selected function. 
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Description 

Background Of The Invention 

The present invention relates to keyless systems for s 
gaining entry and starting motor vehicles. 

. Automobiles traditionally were vulnerable to theft by 
a criminal forcibly removing the ignition lock: cylinder 
thereby being able to start the vehicle without a key. 
With the advent of microprocessor based engine control 10 
. . systems came the ability to provide more sophisticated 
Jgnitiqn-cpntrcl. Today many ignition keys have different 
types of electronic devices embedded in them which 
contain .a ^ special code for the key. When the key is 
inserted into the ignition lock, the vehicle reads the code is 
from the key and the on-board computer system only 
responds to operation of the ignition switch by a prop- 
erly encoded key. Thus the motor vehicle can not be 
started without that key, even if the ignition switch Is 
turned somehow, 20 

The. advent of more sophisticated electronics in 
motor vehidja also has enabled remote keyless vehicle 
entry (RKE) systems tp be provided to the driver. These 
. commonly take the form of a fob which is attached to the 
driver;s .key ;Ping.: The fob houses a radio transmitter 2S 
-which; sends a. digital numerical value via a radio fre- 
quency (RF)/Signal to the vehicle when the driver press- 
ing, the , appropriate switch on the fob. TTie digital 
numerical; value,. prevents spurious radio frequencies 
from activating the motor vehicle circuitry, as .well as 3o 
;making Jt , difficult for , unauthorized persons to gain 
access. vtOi the motor vehicle. The RF signal also 
r encodes,- whether the user wishes the doors to be 
Jocked, unlocked or the trunk to be unlatched. A receiver 
mounted in the motor vehicle detects the transmission 35 
from.the fob, and decodes the RF signal to determine 
whether it is valid for that vehicle and which of the vari- 
ous functions is to be performed. The receiver then acti- 
.vates the , appropriate components within the motor 
.vehicle to perform that function. 40 

Although.;the digital numerical value make it very 
difficult for unauthorized persons to gain access to the 
motor vehicle, concern has been expressed that some 
one with a radio receiver; and a digital signal analyzer 
could eavesdrop on the radio transmissions and learn 45 
the securitjr. numbers. Thus a thief could "stake out" a 
valuable jvehicle^to await the return of the driver and 
learn the security numbers. Those security numbers 
then could be utilized to.steal that vehicle at a later point 
in time;> . . ' „ so 

To improve the.security of remote keyless entry sys- 
tems and deter .eavesdropping, a ^'rolling code" security 
number is transmitted between the fob and the motor 
vehicle. In this technique both the motor vehicle and the 
fob. were encoded with the identical initial security ss 
number during manufacture. Thereafter, each time a 
button on the fob was pressed, the previous security 
number is Incremented by a . value which is derived 



using a predefined algorithm. The resultant new secu- 
rity number then is transmitted to the motor vehicle and 
stored in the fob in place of the previous security 
number. 

Upon receipt of a security number from the fob, cir- 
cuitry in the motor vehicle retrieves the previously valid 
security number which it had stored. The motor vehicle 
circuitry then employs the same algorithm to increment 
the retrieved security number to produce its own new 
security number. In theory, both the fob arKi the motor 
vehicle should be synchronized so that their respective 
execution of the algorithm will produce identicaf hew 
security numbers. Thus, a match between the security 
number received from the-fob and new security number 
derived in the motor vehicle indicates a signal has been 
received from an authorized fob. This rolling code tech- 
nique provides a greatly enhanced level of security and 
operates extremely well as long the security nurribers in 
both the fob and the motor vehicle remain synchronized. 

However, if a button on the fob is acddentally 
pressed when the motor vehicle is beyond the fob's 
transmission range, the rolling security number in the 
fob will be incremerited without a corresporiding incre- 
mentation of the security number in the motor vehicle. 
As a consequences, matches between the two codes 
will no longer occur and the authorized fob will not be 
recognized by the. motor vehicle. One solution to this 
non-synchronization problem is for the motor vehicle to 
generate multiple subsequent security numbers using 
the roiling code algorithm and accept a fob signal as 
valid if any one of those subsequent security numbers 
matches the one received from the fob. However, this 
technique greatly reduces the number of possible' secu- 
rity numbers since during eadi validation test the motor 
vehicle will accept multiple security numbers as being 
valid. Furthermore, the rolling code technique precludes 
the use of multiple authorized fobs for the sarrie motor 
vehicle. > 

It is desirable to provide the remote keyless entry 
system with the ability to start the motor vehicle by add- 
ing another button to the fob. However, this latter func- 
tion requires a higher level of security than that which is 
presently used to guard against unauthorized opening 
of the doors and trunk of the vehicle. In addition, the 
security provided for the ignition feature must also |Dre- 
vent an unauthorized person with the appropriate elec- 
tronic equipment from being able to eavesdrop on the 
radio transmissions and learn the security numbers uti- 
lized to operate the vehicle. - 

Thus, it is desirable to provide a key fob with more 
activation features and a higher level of security. 

Summary Of The Invention 

A general object of the present invention is to pro- 
vide a remote keyless vehicle activation system which 
has a high level of security for the transmitted signals. 

Another object is to provide a means for encrypting 
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the information being transmitted by the remote keyless 
system. 

A further object of the present invention is to pro- 
vide the rolling code security technique which still allows 
the use of multiple authorized fobs for the same motor 
vehicle. 

Yet another object is to provide bi-directional data 
transmission between the motor vehicle and the keyless 
activating device to provide an enhanced level of secu- 
rity. 

A still further object of the present invention is to uti- 
lize a bi-directional data transmission system to enable 
storage of ancillary data about the driver or the vehicle 
in the keyless activation device. 

These and other objectives are satisfied by a key- 
l^s motor vehicle control system having a portable 
transponder by which a user selects a function to per- 
;form, and including a control circuit in the motor vehicle. 
The method of operation for the control system includes 
storing.identical seed data and a transponder identifica- 
tion into the control circuit and the transponder. 

When the user selects a function on the trans- 
ponder, challenge data is exchanged between the con- 
trol circuit and the portable transponder. Preferably the 
r challenge data is randomly generated each time that its 
use is required. Then the control circuit exeoites an 
encryption algorithnri which uses the seed data and the 
challenge: data to produce^.a first . answer. The trans- 
ponder also executes the same encryption algorithm 
using the seed data and the challenge data, thereby 
producing a second answer which is transmitted to the 
control circuit. The transponder also transmits,its trans- 
ponder identification to the control circuit. 

The control, circuit cornpares the first and second 
answers and produces a first indication when a match 
occurs.; The control circuit also determines whether the 
transponder identification received from the trans- 
ponder matches a transponder Identification that had 
, been stored previously in the control circuit and if so. a 
second .Indication is produced: >When*both the first and 
second Indications are. produced, a control signal is 
generated for activating the motor vehicle function that 
, was selected by the user. 

This keyless vehicle control system implements a 
rolling code security systepn without requiring synchro- 
nized independent generation pf the rolling code by 
-both the tran^sponder and the motor vehicle control cir- 
cuit. A very large numt)er of combinations can be uti- 
lized with a single combination ^assigned to a. given 
motor vehicle and a unjque transponder identification 
assigned to each transponder that is authorized to oper- 
ate a given motor vehicle, thus providing extremely high 
probability against unauthorized activation. 

Another aspect of the present invention allows 
transponder identifications tO;be added and deleted 
from storage in the control circuit This functionality ena- 
bles additional specific transponders to control func- 
tions on the same- motor, vehicle and enables a lost 



transponder to be prevented from controlling those 
functions. 

Brief Description of The Drawings 

5 ■ 

FIGURE 1 is a block schematic diagram of a key- 
less motor vehicle control system according to the 
present invention; - • 

FIGURE 2 is a schematic representation of the 

10 process performed in the encryptor in Figure 1 ; 

FIGURE 3 is a flowchart of the prbcedure%)y oper- 
ating the motor vehicle which is pef^i'mea By' tfie 
keyless control system; and ^ ' - - - 

FIGURE 4 is a flowchart of the pribcedure by which 

15 the keyless control syistenri learris' to^Tecdgnize a 
new remote control. . > ' ^ 

Detailed Description Of The Invention * - - ■ ' 

20 With initial reference to Figure 1,'a' 'keyress i-notor 
vehicle control system TO compfises 'a rermote control 
12, which preferably has the form of a key ring fob car- 
ried by a driver, and a control circuit 44 lobat^ in the 
nrotor vehicle. The coritrol drcuit 1 4 inchJdes a mlcro- 

25 connputer 16 vwth an interria! microprocessor and mem- 
ory in which the control program aiid ciata^^e^stdraJ/^A 
conventional dock circuit 22 si^Dplies^ii^iFig p^lsi^^^ to 
the microcomputer 16. A pkiraflity of 'rrianuai^ 
switches 24 and 25 enabre a service^techhidah to-pflace 

30 the microcomputer 1 6 info different operating nriddes, as 
will bedescribed. Th&contirol circuit t4bpeJ-affes several 
functions on the motor vehide sudi "ai^ leSckiiig' 
unlocking the doors, dniatcliirtg the trUrik lid^nd'starting 
the engine^ for example: For that fuhctionalify. the'^iriid-o- 

35 conrputer -16 is interfaced to' the corresp6hdirig''kcttia^- 
ing devices on.-the-motor vehide. In ^ome niotor 
vehides. the various fDnctk)ris are 'cdntrdlled 'By ' an 
another i computer in the motor vehicle! to- which the 
microconnputer 16~ sends Operating cdhnmaftds via a 

40 parallel communication bus 18. -as will be described 
subsequently. In otiier motor vehfciles,' the 'microcom- 
puter 16 has individual output^ lin^ 20 connected 
directiy to the control devices for the>fespective func* 
tions being operated. Specif icatly, 'Separate wiries may 

45 be coijpled to actuators which Hock and- tmlbck the 
doors, unlatch the trunk lid and start the engine. - - 

A serial output line 26 arid a serial input iine^ 2S of 
the microcomputer 16 are connected to a^^first radib fre- 
quency transceiver 30. The first ^transceiver ^30' mod u- 

50 fates a starxiard RF frequency carrier with the sertal 
data received on line 26 and transmits that modulated 
radio frequency signal via an antenna 32; The first 
transceiver 30 also demodulates other radio frequency 
signals received by the antenna 32 to recover serial dig- 

55 ital data which then is sent via line 28 to tiie microcom- 
puter 16. . • i : 

The first transceiver 30 of tiie control circuit 14 is 
designed to communicate with a second radio fre- 
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quency transceiver 40 and antenna 42 both located 
within the remote control 12. The second transceiver 40 
has a receiver section which demodulates the received 
radio frequency signal to recover digital data that modu- 
. lates that signal and the recovered data is sent in a 
serial format to an input register 44. The input register 
.44 converts, the serial data stream from the second 
transceiver 40 Into a parallel format which is read by a 
controller 46. The controller 46 may be either a hard- 
vyired device for sequentially performing the remote 
control opbratiqhs to be described, or a programmable 
device whifch executes a software program to perform 
tho^e operations. Controllers of this general type are 
well-known' ill d types of transponders and their 

<»nverfli6n^ can be utilized to implement 

the f undtipns of the pre^nt controller 46. The controller 
46 of the remote control 12 is connected to an electri- 
cally erasable prbgrammabje read only memory (EEP- 
RQM)' 48 which stores data to be transmitted to the 
motor vehicle control circuit 14 when, the remote control 
is interrogated. 

. . The rernpt© control ,12 also includes an encryptor 
50. connected to the controller 46 to encrypt a remote 
controls security number for transmission to the control 
circuit 14. The encryptor 50 utilizes a secret-key cryp- 
tography^ algorithm to encrypt data for sending to thie 
control circuit. The algorithm specifies a sequence of a 
jDluralrty of logiqal operations which are perfbnned on a 
taiovvn seed nun^ and a challenge number received 
frorn the corrtrd circuit to produce a number for trans- 
mission , by ' the remote control . Several cryptography 
aigorit.hms.,of,.^ are > described by Mehrdad 

Foroozesh^iri an ^rtide e "Protecting Your Data 
With.Cryptography," U Nov. 1996. v14, n12. 

page ,55(6),, yvrhich description is incorporated herein by 
reference. Such encryption techniques arid algorithrns 
are commonly used to encrypt computer data, being 
transmitted over common carriers. 
. . A control circuit 14 also receives timing signals from 
a clock circuit 52. A plurality of user operable switches 
54 are connected to different input lines to the controller 
46 in order for the driver to select the specific functions 
to be performed on the motor vehicle. For example, a 
separate switch can be provided, for the functions of 
unlocking and locking the doors, unlatching the trunk lid. 
and starting the engine. . 

Digjtal output data is sent by the control circuit in 
parallel form to a parallel-in/serial-out output register 56. 
The serial data frorri the output register 56 is applied to 
the input .of a, transmitter section in the second trans- 
ceiver 40 which modulates a radio- frequency signal 
which that data The resultant RF signal is sent via the 
antenna 42 to the control circuit 14 in motor vehicle. The 
components , of the remote control preferably are pow- 
ered by-^a battery (not shown), but as an alternative, 
power could be derived from received RF signal energy 
as was done in some prior remote controls. 

The procedure.by which the keyless motor vehicle 



control system 10 operates different functions on the 
motor vehicle is depicted by the flowchart of Figure 3. 
When activation of one of those functions is desired, at 
step 60 the driver presses the appropriate remote.con- 
5 trol switch 54 which corresponds to that function. This 
activation of the switch sends a signal to the controller 
46 which responcte by obtaining an initial, numerical 
code from storage in the. EEPROM- 48. Preferably, 
although not required, the initial numerical code con-e- 
10 sppnds to the vehicle identification number (VIN) for the 
particular motor vehicle being controlled. Alternatively 
the Initial numerical code, may be aiunique idantrfication 
number assigned to that remote control and stored in 
the EEPROM 48. In either case, fhe initial numerical 
IS code is sent via output register 56 to. the second .trans- 
ceiver 40. from which it is transmitted at step 62 to the 
control circuit 14 in the adjacent motor vehicle. 

The RF remote control signal is received by a super 
heterodyne receiver section in the first transceiver 30. 
20 Receipt of the Initial numerical code causes the motor 
vehicle control circuit 14. which had been in a "sleep 
state," to wake up at step 64 and its microcomputer 16 
begins executing a software routine for interrogating the 
remote control 12. The process of waking, up may verify 
25 that the remote control sent the proper initial code for 
this motor vehicle. In step 66 of the interrogation proc- 
ess, the microcomputer 16 generates a random number 
which preferably Is at least four bytes long and which is 
referred to a "challenge number." This challenge 
30 number then is sent via line 26 to the first transceiver 30 
where it is transmitted at step 68 to tiie renrrate control 
12. 

The remote control 12 receives the RF signal from 
the control circuit 14 via the antenna 42 and second 

35 transceiver 40 which recovers , the challenge number 
from that signal. The challenge number is fed. via the 
: input register 44 to the controller 46. Upon receiving tfie 
challenge number, the controller 46 activates: the 
encryptor 50 to generate an answer number. Specifi- 

40 cally, the controller 46 sends the encryptor 50 the chal- 
lenge number and a predefined secret seed number 
tiiat is stored in tiie EEPROM 48. As .graphically 
depicted in Figure 2, the encryptor 50 performs a series 
of logical operations, denoted by ©, which combine the 

45 seed and challenge numbers according to the selected 
encryption algorithm utilized by the encryptor at step 70. 
As stated previously, the encryption algorithm may be 
any of several algorithms commonly used to encrypt 
computer data for transmission. The result is a four to 

50 five byte numerical answer which is in essence the chal- 
lenge number encrypted by tiie seed number using the 
selected encryption algorithm. At step 72, the answer 
number then is sent by the controller 46 via the output 
register 56 to tiie second transceiver 40..;The answer 

55 number then is transmitted via the radio frequency sig- 
nal to the control circuit 14 on the motor vehicle. 

The EEPROM 48 also stores a unique identification 
number (ID) for this remote control. If tiiis, identification 
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number was not transmitted with the initial signal at step 
62, the controller 46 now retrieves that identification 
number and causes it to be transmitted via the second 
transceiver 40. The identification number may be trans- 
mitted directly or first encrypted by the encryptor 50 5 
using the cryptography algorithm and seed number, in 
which case the control circuit 14 is programmed to 
decrypt the received data. A plurality of remote controls 
12 may be authorized to activate features of the same 
motor vehicle in much the same way as a number of dif- w 
ferent physical keys are able to open the doors. 
Although each of the authorized remote controls for the 
same motor vehicle has the same seed number stored 

:ih their EEPROM's 48, each remote corttrol has a 
unique identification number The controller 46 also 15 

■ causes a numerical indication of the particular switch 54 
which was operated by the driver, and thus an indication 
of the function to be performed, to be transmitted at step 
72. 

The control circuit 14 in the motor vehicle receives 20 
the RF signal from the remote control 12 and the first 

. transceiver 30 recovers the numerical answer, remote 
control identification number and switch irKiication 
which are stored temporarily within the memory of the 
microcomputer 16 at step 73. While the remote control 25 
12 was encrypting the numerical answer and selecting 
the other items of data to fc>e transmitted, the control cir- 
cuit 14 at step 74 takes the challenge number produced 
at step 66 and applies the same encryption algorithm 

-^and seed number, as used by the encryptor 50 in the 30 
remote control 12, to produce an expected answer at 
step 74. This application of the encryption algorithm can 
be accomplished in software by the microconnputer 16, 
or a duplicate of the hardwired circuitry of the encryptor 
50 can be incorporated in the control circuit 14. arid 35 
operated under the microcomputer control to produce 
the expected answer. Since both the remote control 12 
and the control circuit 14 utilize the same encryption 
algorithm, seed number and challenge number, the 
expected answer and the answer received from the 40 
remote control should be identical. Therefore, at step 76 
the received and expected answers are compared and 
a determination is'made at step 76 whether they exactly 
match each other. If the two answers do not hiatch, as 
would occur if a bogus remote control 12 was employed 45 
in an attempt to access the motor vehicle, the execution 
of the program' by the microcomputer 16 jumps to a 
point where the control circuit 14 return to the sleep 
mode without operating any of the motor vehicle func- 
tions, so 

However, if a determination is made at step 78 that 
the two answers match, the program execution by the 
microconnputer '16 advances to step 80 where the 
remote cbintrol identification number received by the 
control circuit 14 rs compared to a list of valid remote ss 
control identification numbers stored within the micro- 
conputer memory. This list contains the valid identifica- 
tion number for each remote control that is authorized to 



operate the motor vehicle. If the received remote control 
identification number is not on this list, the program exe- 
cution jumps to the sleep mode. By requiring the valida- 
tion of the remote control's unique identification number, 
a specific remote control that is lost can be rendered 
inoperative, as will be described, even though; it pro- 
duces the correct answer number in response tolriterro- 
gation. 

When a remote control identification' number, 
received by the control circuit 14^ matches one of the 
valid identification numbers contained^ with/ the^ micro- 
computer memory, the program executior) ^varices to 
step 81. At this juncture the microcohntputer 16 checks 
an input to determine whether a rerndte coriti:ol delete 
mode switch 24 is closed. If that is not the case, the exe- 
ojtion branches to step 82 at which the microcomputer 
16 checks another input to deterrnine whether a remote 
cjontrol add mode switah 25 is closed. The function, of 
these switches 24 and 25 will be described subse- 
quently - , 

When neither mode selection switch 24 or 25 is 
found to be closed the program execution advances to 
step 83 where the switch indication number received 
from the remote control 1 2 is evaluated to determine the 
Indicated function to be performed by the rhotbr vehicle. 
If the door unlock function has been inidicated,*the pro- 
gram execution branches^©' step 84 where a^urilock 
command signal is sent out by tfie micrb^r^^ 
either over corhmunicatibri bus 18 tDih6 irhkfn'^computer 
for thie motor vehicle, or over oriie of tHfe out- 
put lines 20 to theibck cohfrbl drcui! bf theVrtotor vehi- 
cle. Then, at step^SiS, the fernote cihtroP identification 
number is sent by the Wicrocortiput^r 16 bver'the cbm- 
municatibn bus 18 to Mhbther cbiTipiHef on 
vehicle which automatically contfbfs 'various ddjctstabie 
devices, such as the drri)^*s seat and riearS^ielw mirfbre. 
In resiponse, the other computer autbnriati<yiy' mov^ 
those adjustable devices ' into^' pbsitior^ previbusiy 
stored for the-driver vvhb uses the rerriole control with 
this identification number Thus the remote control iden- 
tification nurrber is utilized to personalize vehicle set- 
tings for the particular ' driver associated with the 
identified remote control. 

Alternatively, when the switch indication Jecoded'^t 
step 83 indicates that the doors of tlie motor vehicle are 
to be locked, the program execution passes t^irough 
step 88 where the appropriate output signals are pro- 
duced by the microcomputer 16 to cause actuatorsMn 
the doors to engage the lod^. Similariy. step 90 is exe- 
cuted when the switch indication decoded at step 83 
designates that the trunk is to be unlatched. Likewise, 
the operating procedure branches to step 92 when the 
switch indication designates that the engine is to be 
started. As with the other functions at this time, the 
microcomputer 16 would send the appropriate activa- 
tion signals over communication bus 18 and the dedi- 
cate! control lines 20 to cause the starting of the 
engine. Because the present keyless control system 10 
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provides a very high degree of security against unau- 
thorized individuals being able to start the engine, the 
conventional key operated ignition switch with a 
mechanical interlock to the steering mechanism may be 
eliminated. It will be noted that a separate push button 
switch within the motor vehicle would be utilized to turn 
. pff the.ehgine at a later point in time. After the particular 
functions have been activated, the control circuit then 
returns , to the sleep mode until another signal is 
received from a remote control 12. \ 

^The present , keyless vehicle activation system uti- 
lizes a rolling security code without requiring synchro- 
nized independent generation of the rolling code by 
,both the fempte control and the motor vehicle control 
. circuit. A very large number of combinations can be 
implemented with a single combination assigned to a 
given motpr vehicle, thus providing extremely high prob- 
ability against unauthorized activation. 

Ultimately, only a remote control may be ennployed 
to gain entry and start the motor vehicle without, even 
"the ability to use a physical key. In this eventuality, a pro- 
vision: must be made for an indication to be given to the 
driver when the battery within the remote control has 
been depleted to such a level where inoperabilrty Is 
approaqhing. One does not vrarrt the battery to become 
conripJetely depleted and thereby depriving the driver of 
. nriptoif yebicle use. As^^a consequence, the remote con- 
trol can be provided with a battery level detection circuit 
which . ^ehs^es when the battery voltage drops below a 
l^svel which is slightly greater, than the voltage level at 
y^icKflie rernote control will no longer be functional. 
Upon that ^pccurrence, a special numerical code is sent 
the next Sme the remote control 12 is utilized which pro- 
vipes^an indication to the control circuit 14 that the 
remote .oontrpi voltage has reached a dangerously low 
level. In response, the microcomputer 16 can send a 
signal to the main computer for the motor vehicle which 
generates a visual indication to the driver, such by illu- 
minating the appropriate message on the Instrument 
panel. This provides a warning to the driver the remote 
control needs battery replacement and affords a short 
period in.whlc^i to replace the battery while the remote 
control still is usable. Since the remote control 12 stores 
the data in an EEPROM 48, the contents of the memory 
are not lost when the battery completely runs down or 
during battery replacemerrt. 

\/Vith reference to Figure 1, because the remote 
control 12 has an EEPROM 48, additional storage loca- 
tions can be provided for.storage of ancillary Information 
alDput the motor vehicle or the driver associated with the 
particular remote control. In this case, after activation of 
the designated function at steps 84-92 on the flowchart 
of Figure 3. additional steps are executed in which the 
control circuit microcomputer 16 generates a command 
which is transmitted via the first transceiver 30 and 
antenna 32 to the remote control 12. This command 
orders the cpntroller 46 in the remote control to obtain 
pne or, more items of ancillary information from the 



EEPROM 48 and transmit it back to the control circuit 
14. Thus the control circuit 14 is able to obtain informa- 
- tion about the driver's identity, past vehicle perform- 
ance, etc. which has been stored in the remote control 
5 memory. 

With this additional remote control functionality, the 
microcomputer 16 is able to update the ancillary infor- 
mation stored in the remote control 12. To do so the 
control circuit . 14 transmits the updated information 
, 10 along with a storage comnriand. The controlliBr 46 of the 
remote control 12 responds to the storage conrimand by 
storing the accompanying updated infprmatipri irr desig- 
. nated locations within the EEPROM 48* 

The information stored within the remote control:12 
75 also may be read out and altered by special devices at 
the motor vehicle dealers which are similar to the struc- 
ture of the control circuit 14 in Figure 1. However, that 
device is not associated with a motor vehicle ar^ con- 
tains additional components for displaying information 
20 read from the remote control and entering information to 
be stored in the remote control. In such a device, a 
video monitor, printer and an alphanumeric- keyboard 
are connected to the , microcomputer 16 which is also 
programmed with the appropriate software for imple- 
25 menting the data read and write operations. Similar 
remote control readout devices could be provided to law 
enforcement agencies in order to determine the identity 
of the driver who normally utilizes the remote-control, 
and to medical personnel to obtain medical information, 
30 such as blood type,, allergies and current medications, 
about the driver from the remote control. . 

In the event that the driver loses one of the author- 
ized remote controls for a given motor vehicle, the cor- 
responding remote control identification number can be 
35 removed from the list of authorized remote controls con- 
tained within the menriory of the vehicle control circuit 
microcomputer 16. As a result should a finder or thief of 
the missing remote control be able to match it with the 
particular vehicle, the remote corrtrol no longer will be 
40 able to function properly 

.To delete a remote control identification number 
from the microcomputer memory list as would .be desir- 
able when a remote control is lost or stolen,, a . motor 
vehicle dealer accesses .. the control , circuit .14. and 
45 closes the.deletion mode switch 24. While that switch is 
closed, each of the remaining remote controls is placied 
one at a time near the vehide and one of its Junction 
switches 64 is pressed. This operation sequentially 
sends the remote control identification number ^from 
so each of the remaining remote controls to the control cir- 
cuit 14 in the motor vehicle. Each time a rernote control 
is activated, the operating procedure branches from 
step 81 In Figure 3 tO: a delete mode routine which 
causes niicroconiputer 1 6 to store each of; the; received 
55 rernote control identification numbers.. After all of the 
remaining remote controls have been .activated, the 
motor vehicle dealer opens the deletiori, mode switch 24 
which causes the.rnicrocomputer.16.to,Sican:its previous 
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list of remote control identification numbers to deter- 
mine which ones were not received while the deletion 
mode switch 24 was closed: The non-received remote 
control identification nunlbers are deleted from the 
microcomputer memory so that the conesponding 
remote controls no longer are able to operate the nnotor 
vehicle. 

Another mode of operation can be activated to add 
additional remote control identification numbers to the 
list of aulhorized remote controls within the memory of 
the microcomputer 16. This process is analogous to 
duplicating the physical keys previously used to access 
motor vehicles and is initiated by a motor-vehicle dealer 
' closing the remote control add mode switch 25 within 

- tiie control circuit 14. Then, one of the existing author- 
ized remote controls is activated by pressing any one of 
the function switches 54. This operation results in the 
execution of steps 60 tiirough 82 in Figure 3 at the end 
of which a determination is made at step 82 that the 

- remote control add mode switch 25 is closed and the 
procdduro branches to the remote control add routine 
depicted on Figure 4. 

• The remote control add routine at step 100 causes 
control circuit 14 to send the secret seed number uti- 
lized by the encryption algorithm and a previously unas- 
signed remote control identification number to the first 
transceiver 30 along with a command instructing a new 
remote control to store those transmitted numbers. Any 
pre?/iousiy programmed remote control within the vicin- 
ity of the motor vehicle is inhibited from responding to 
this command so that the information contained within 
the previously programmed remote control will not be 
overwritten by the new data being transmitted by the 
corrtrol circuit 14. 

When an unprogrammed or erased remote control 
12 receives this data stream from t^e control circuit 14 
at procedure step 102. the controller 46 recognizes the 
command as indicating programming of the remote con- 
trol: In response the seed nur.ibor from the control cir- 
cuit is stored into the designated location within 
EEPF^OM 48 and the identification number is placed 
ihfio another designated location within that memory. 
Thus the new remote control is programmed with the 
appropriate seed number for activating thCf particular 
meter vehicle and a unique /emote control identification 
nuiTiber which v.ill be recognized by that motor vehicle. 
^» Tnen tf ie microcomputer 1 6 within the control circuit 
randcmiy generates a challenge number at step 104 
which is transmitted to the newiy programmed remote 
control at step 106. The received challenge number is 
passed to the remote controrc eiicryptor 50 which uses 
the challenge number and the previously stored seed 

' number to produce a numerical answer at step 108. At 
step 110 that numerical answer is transmitted back to 
the control circuit 14. aiong with the nev/ly stored 

-remote Control identification nuriibcr. 

Upon receipt of the numerical answer and remote 
control identification number, at step 1 12 the control cir- 



cuit 14 compares the received answer with an expected 
answer generated at step 114 to verify that the new 
remote control has been programmed properly. If the 
answers do not match at step 116, the procedure termi- 

5 nates without adding a new entry to the list of author- 
ized remote controls. The remote control identification 
ruimber received by the control circuit 14 also is verified 
for its accuracy at step 1 18. If the new remote control 
passes both these verification tests, at step 120 the 

10 microcomputer 16 adds the new remote control identifi- 
cation number to the list of authorized rernctc controls 
that is maintained in the microcomputer t7iemor/. 

Then at step 122, the control circuit 14 iransmits an 
' storage command and ancillary information wtiich Is to 

75 be stored in the new rOTOte control. The remote control 
responds at step 124 by storing tiie ancillary information 
within its EEPROM 48 and the remote control addition 
procedure terminates. 

With reference again to Figure 1, the enlbodiment 

20 of the keyless motor vehicle contol system 10 
described above requires that the user manually acti- 
vate one of the switches 53 on tiie remote control 12. As 
an alternative, the switches may be replaced with a 
motion detector, such as a ball in a cage type switch. 

25 Thus whenever the driver is walking or ^handlirig the 
remote control 12, the motiori' detector^ indicates that 
motion to the controller 46. In resp6hse.~-the controller 
46 causes the renrote control 12 to trarismrt-tii^ initial 
numerical cede. Theh the rerndte corrtrol'l^ listeiis for 

30 the control circuit 14 to transrViit the ehaHerige number. 
If a challenge number is not received wrtKir?^a'defihed 
period of time after transmission of the iriitial r'lunrierical 
code, the remote control i2 ceases 'operating ' Until 
another signal frbrri the 'motioh detector is produced. 

35 However, when tiie remote control i 2 receives- a chal- 
lenge number, the encrypto> 50 Is activated to' produce 
an answer which is sent to the control circuit 14 and the 
process proceeds as described previously. 

A further embodiment also is feasible in vyhich'the 

40 remote control is passive. In this situation, the control 
drcuit 14 periodically transrnits an RF activation signal, 
which upon receipt causes remote control 12 to respond 
automatically by transrnitting the Initial numerical code. 
In response to the initial riumericai code, tHe'control cir- 

45 cuit 14 sends the challenge number and waits for the 
answer. When the control circuit 14 venfies the receipt 
of a correct answer and identification data from an 
autfiorized remote control 12, signals are sent tb cbriri- 
ponents in the motor vehicle which- unlock at least one 

so door arKl enable a manual switch on the dashboard to 
be pressed to start the engine. In this embodirnent, tiio 
periodically transmitted signal from'tiie control circuit 
activates remote control to commence the operating 
procedure of Figure 3. ratPier than the driver pressing a 

55 remote control switch 54. Therefore, tfie driver merely 
has to be within the transmission range of the motor 
vehicle control circuit 14. In this embodiment, after the 
engine is turned off manually, the conti'ol circuit 14 is 
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disabled for a given period of time allowing the driver to 
move outside the transmission range before the control 
circuit again commences the periodic transmission of 
the activation signal. 

The foregoing description is directed primarily to s 
preferred embodiments of the invention. Although some 
attention was given to various alternatives within the 
scope of the invention, it is anticipated that skilled arti- 
sans will likely realize additional alternatives that are 
now apparent from the disclosure of those embodi- io 
merits. Accordingly, the scope of the invention should be 
deterrniried from the following claims and not limited by 
the above disclosure. 

Claims is 

.1 . A rnethod for operating a keyless motor vehicle con- 
trol system including a remote control for carrying 
by a user and a control circuit in the motor vehicle, 
said .method comprising the steps of: so 
' - • . * 

stpring seed data, in the control circuit; 

. storing the seed data in the remote control; 

programming a first remote control identifica- 
. ^on into the remote control; 25 
^ :stpring the first remote control identification 

into the control circuit; 

in response to activation of the remote control 
by movement of the user., exchanging chal- 
lenge data between the control circuit and the 3o 
^ remote control ; - 

circuit executing an encryption algo- 
,rithm which uses the seed data and the chal- 
lenge data to produce a first answer; 
the remote control executing the encryption 3S 
.,. algorithm whidi .uses the seed data and the 
. challenge data to produce a second answer; 
the remote control transmitting the second 
answer to the control circuit; 
the control circuit comparing the first and sec- 40 
,pnd answers and producing a first indication 
when a match occurs; 

the remote control transmitting the first remote 
control identification to the control circuit; 
determining whether the first remote control 45 
identification received from the remote control 
matches a; first remote, control identification 
previously stored in the control circuit and if so 
producing a second indication; and 
in response, to presence of both the first and so 
second indications, activating a component of 
the motor vehicle to perform a defined function. 

2. The method as recited in claim 1 further comprising 

. the contrri circuit randomly generating the chal- 55 
lenge nunrfeer. 

3. The method as recited in claim 1 wherein the 



defined function is selected from a group consisting 
of unlocking a door, locking a door, unlatching a 
trunk lid. and starting an engine. 

4. The method recited in daim 1 further comprises the 
user defining a function on the remote control; and 
transmitting to the control circuit a designation of 
the function defined by the usor. 

5. The method as recited in daim 1. wherein the steps 
of the control circuit and the remote control execut- 
ing an encryption algorithm comprise performing a 
plurality of logical operations on the seed data and 
the challenge data. 

6. The method as recited in claim 1 wherein the step 
of storing the seed data in the remote control com- 
prises: 

(a) exchanging a challenge number between 
the control drcuit and a previously pro- 
grammed remote control; 

(b) the control circuit executing the encryption 
ailgorithm which uses the seed data and the 
challenge number to produce a third answer; 

(c) the previously programmed remote control 
executing the encryption algoritiim which uses 
the seed data and the challenge number to pro- 
duce a fourth answer; 

(d) . the previously programmed remote control 
transmitting the fourth answer arxJ a second 
remote, control identification to the control cir- 
cuit; 

(e) the control circuit comparing the third and 
fourth answers and producing a third indication 
when a match occurs; 

XO determining whether tiie second remote 
control identification received from the previ- 
OL^Iy programmed remote control matches a 
remote, .control identification previously stored 
in the control drcuit and if so produdng a fourth 
indication; 

. (g) upon the occurrence of both the third and 
fourth indications, the control circuit transmit- 
ting the seed data to the remote confa-ol; and 
(h) the remote control storing the seed data. 

7. The method as recited in claim 6 wherein the step 
of programming a first remote control identification 
into the remote control comprises upon the occur- 
rence of both the first and second indications, the 
corttrol drcuit transmitting the first remote control 
identification to the remote control; and the remote 
control storing the first remote control identification. 

8. The method as recited in claim 7 further comprising 
tfie control drcuit verifying that the seed data and 
the first remote control identification were properly 
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- stored by the remote control. 

9. The method as recited in claim 6 further comprising 
the control circuit verifying that the seed data was 
properly stored by the remote control. 

1 0. The method as recited in claim 6 further comprising 
the remote control transmitting the first remote con- 
trol identification to the control circuit; and the stor- 
ing the first remote control identification into the 
control circuit. - ' 

^11. The method as recited in claim 6 further comprising 
deleting the first remote control iderrtification from 
storage in the control circuit. 

12. A method for remotely operating locks of a rrK)tor 
vehicle with a keyless entry system that includes a 
control circuit in the motor vehicle and a remote 
control for can-ying by a user, saicl method compris- 
ing the steps of: 

stoi-ing identical seed data in both the control 

circuit and the remote control; 

in response to. the u^er activating the remote 

control, generating and exchanging challenge 

data between the control circuit and the remote 

control; 

the corttrol circuit executing an encryption algo- 
rithm which^ uses the seed data and the chal- 
lenge data to produce a first answer; 
the remote control executing the encryption 
algorithm which uses the seed clata and the 
challenge data to produce a second answer; 
the remote control transmitting the second 
answer to the control circuit; 
the control circuit comparing the first and sec- 
ond answers and producing a first indication 
• . when a match occurs: and ; 
• ' • in response tb the first indication, unlocking a 
- r door on the motor vehicle. 

13. The method recited in clairti 12 further comprising: 

' programming^ a remote control identification 
" into the remote control; ^ 
storing the remote control identification into the 
contrbl circuit; 

when the user activates^he remote control, the 

. remote control transmitting the remote control 
identification to the control circuit; 
the cohtrol circuit determining whether the 

- remote'control identification received from the 
remote control matches a remote control iden- 
tification previously stored in the control circuit 

' and if so producing-a second indication; and 
. vtfherein the step of unlocking a door on 

: the motor vehicle also is in response to the sec- 



ond indication. 

14. A method for remotely operating a motor vehicle 
with a keyless control system that includes a control 
5 circuit in the motor vehicle and a remote control for 
carrying by a user, said method comprising the 
steps of: V ' 

the control circuit transmitting an interrogation 
10 signal; " ' ' 

in response to receiving the InteWogation sig- 
nal, the remote cohtrol transmitting^ ah initial 
signal; ' * • - : - 

the control circuit responding to the initial signal 
75 by transmitting challenge data to the rerriote 

control; 

the control cii-cuit' executing an encryptibh algo- 
rithm which uses seed data ancftherdiallenge 
data to produce a first answer;' 

20 the remote control -executing the encryption 

algorithm which uses the seed data and the 
challenge data to produce a seobhd answer; 
the remote control 'trahsiTiitting' "tire second 
' answerto the control circuif:' ' - > 

25 the control circuit comparing the firdt and sec- 

dnd answers arid prSdudirig a' ffr^t- indication 
when a match occurs: arid^ ^ ' ' 
in response to the ^irstlridicMibn^^ 
' function oh the Tfratb? vehicle. --^ " 

30 '• . ~ ■* " * " '-^'^ ' ^' .i.':?:^ e.i; 'rj. 

ia A method for remotely operating la tn'dtbr vehicle 
with a systern which includes a cor^^ in the 

motor vehrde krid a rembte'contix>l fdrdafr by a 
driver, toid method bbmpi'ising the sf^ of : 

t \i\ t -storing rriformatioirregardingthfe^^^ 

the- ^Tiotbr vehicle opigratiort- history and the 

dhv6r; ■ *-*:^'' ' 

upon acti\^tion by the^jriver; the relriote control 

40 * trarismittihg' a Signal; - ' • 

a receiver-sending a command' to the remote 
control in response to' receiving the signal: 
the remote control transmitting the' information 
in response to receiving*' the comrhand; and 

• 45 the receiver receiving 'the inforhiatiori. 

16. The method recited in claim 15 further comprising: 

storing identical seed data in both the control 

50 ' circuit and the remote control; 

in response to receiving the signal, the control 
; circuit generating and transfnitting challenge 
data to the remote control; 
■ the control circuit executing an encryption algo- 

55 rithm which uses the seed data and the chal- 

lenge data to produce a first answer; 
the remote control executing the encryption 
algorithm which uses the seed data and the 
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challenge data to produce a second answer; 
the remote control transmitting the second 
answer to the control circuit; 
the control circuit comparing the first and sec- 
ond answers and producing an indication when 
a match occurs; and 

in response to the indication, unlocking a door 
on the motor vehicle. 



a designation of the function selected by the user. 

20. The method recited In claim 17 wherein the function 
selected by the user is starting the engine; and fur- 
ther comprising responding to the control signal by 
starting the engine without requiring use of a key. 



1 7. A method for operating a keyless motor vehicle con- 
trol system including a portable remote control on 
which a user selects a function for the motor vehicle 
to perform, and including a control circuit In the 
motor vehicle, said method comprising the steps of: 

storing seed data in the control circuit; 
storing the seed data in the portable remote 
control; 

programming a remote control Identification 
into the portable remote control; 
storing the remote control identification into the 
control circuit; thereafter 
in response to a user selecting a function on 
the portable remote control, transmitting an ini- 
tial signal to the control circuit; 
tile control circuit responding to receiving the 
initial signal by generating challenge data and 
transmitting the challenge data to the portable 
remote control; 

tiie control circuit executing an encryption algo- 
rithm which uses the seed data and the chal- 
lenge data to produce a first answer; 
the portable remote control executing the 
encryption algorithm which uses the seed data 
and the challenge data to produce a second 
answer; 

tiie portable remote control transmitting the 
second answer and the remote control identif i- 
. cation to the control circuit; 
ittie control circuit comparing the first and sec- 
ond answers and producing a first indication 
when a match occurs;; - 
determining whether the remote control identi- 
fication received from the portable remote con- 
trol matches a remote control identification 
previously stored in the control circuit and if so 
producing a secorKi indication; and 
in response to presence of both the first and 
second indications, producing a control signal 
for activating the function selected by the user. 

18. The method recited in claim 17 wherein the user 
selects the function to be performed from a group 
consisting of unlocking a door, locking a door, 
unlatching a trunk lid, and starting an engine. 

19. The method recited in claim 1 7 further comprising 
the remote control transmitting to the control circuit 
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(54) Keyless motor vehicle entry and ignition system 



(57) A keyless control system (10) is disclosed 
which may be employed to gain entry to a motor vehicle 
and start an engine. When using this system, a user 
activates a remote control (12) by selecting a function 
for the motor vehicle to perform. In response, a chal- 
lenge number is exchanged and used in an encryption 
algorithm by both the remote control (12) and a control 
circuit (14) in the motor vehicle to produce independ- 
ently of each other separate algorithm answers. A first 
verification indication is produced when the control cir- 
cuit (1 4) finds both answers to be the same. The remote 



control (12) also sends Its unique remote control identi- 
fication and a designation of the selected function to the 
control circuit (14). If the received remote control identi- 
fication matches is on an authorized remote control list 
stored In the control circuit, a second verification indica- 
tion is produced. When both the first and second verifi- 
cation indications are produced, the control circuit 
issues a signal that causes the motor vehicle to perform 
the selected function. 
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